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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1 .17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.1 14, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.1 14. Applicant's submission filed on 07/12/2010 has been entered. 

2. 

Status of Claims 

Claims 1, 4, 9-1 1 and 16-19 have bee amended. Claims 3, 5, 6, 12-15, 21 and 22 have been 
cancelled. Claims 1, 2, 4, 7-1 1 and 16-20 are pending and have been considered below. 

EXAMINER'S AMENDMENT 

2. An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with 
Garth Vivier (Reg. No. 57,313) on September 22, 2010. 

The application has been amended as follows: 



1 . (Currently Amended) A method for controlling a network remotely, the method 
comprising: 
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configuring a first control unit, inside a first firewall, the first control unit separate 
from the first firewall and used to control the network, configuring of the first control unit 
including: 

querying a proxy server outside the first firewall from the first 
control unit to obtain a proxy server IP address, 

receiving proxy server identification information with respect to 
the proxy server outside the first firewall, the proxy server identification 
information including the proxy server IP address, 

generating an access key in the first confrol unit, and 
sending the access key and first confrol unit identification 
information to the proxy server; 
configuring the proxy server outside the first firewall , the proxy server being 
implemented within a De-MiUtarized Zone (DMZ) between the network and an 
unprotected public network , configuring of the proxy server including: 

receiving the first confrol unit identification information, 

storing the first confrol unit identification information in the proxy 

server, 

adding the first confrol unit as a first remote device, and 
exchanging a validation message between the first confrol unit and 
the proxy server, 

establishing a session between the first confrol unit and the proxy server, by use 
of the access key; and 

establishing a connection between the proxy server and a console which resides 
within the unprotected public network , to permit remote user management of the network 
by communication between the first confrol unit and the console via the proxy server. 

4. (Currently Amended) The method of claim 1 3-, wherein receiving the proxy server 
identification information includes receiving a proxy server host name, a proxy server IP 
address, and a proxy server port number 
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Allowance 



3. 



Claims 3, 5, 6, 12-15, 21 and 22 have been cancelled. 



4. 



Claims 1, 4, 9-11 and 16-19 have been amended. 



5. 



Claims 1, 2, 4, 7-1 1 and 16-20 are allowed. 



Examiner's Statement of Reasons for Allowance 



The following is an examiner's statement of reasons for allowance 
6. Sit et al (US 6,349,336) is drawn toward a tunneling action that allows a remote 
processor to communicate with a local processor when the remote processor is coupled to the 
local processor via a reverse proxy device, a computer network, a firewall and a proxy agent 
device. Initially, the local processor establishes a communication channel with the remote 
processor by dispatching a local request message to the proxy agent device. The proxy agent 
device dispatches the local request message via the firewall and network to the reverse proxy 
device, thus enabling the firewall to receive a remote response message to the local request 
message, the proxy agent device extracts and dispatches the remote request message to the local 
processor. 

Grantees (US 6,324,648) is draw toward a computer system provides authenticated access for a 
client computer over an insecure, public network to one of a plurality of destination servers on 
private, secure network, through the use of a client-side X.509 digital certificate. A demilitarized 
zone (DMZ) proxy server intercepts messages destined for the destination servers, and forwards 
the intercepted messages through the firewall to a gateway on the private network. The gateway 
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is configured to create a cookie, based on the selection of one of a several applications available 
on the private network. The cookie contains an identifier sufficient to identify the destination 
server corresponding to the selected application. The gateway processes the cookie and appends 
the identifier on a destination URL portion of the messages for routing. 

7. The above prior art reference of record do not teach or render obvious the limitations as 
recited in independent claims 1, 9 and 16 amended. The combined references fail to teach 
configuring a first control unit, inside a first firewall, the first control unit separate fi-om the first 
firewall and used to control the network, configuring of the first control unit including: querying 
a proxy server outside the first firewall from the first control unit to obtain a proxy server IP 
address, receiving proxy server identification information with respect to the proxy server 
outside the first firewall, the proxy server identification information including the proxy server 
IP address, generating an access key in the first control unit, and sending the access key and first 
control unit identification information to the proxy server; configuring the proxy server outside 
the first firewall, configuring of the proxy server including :receiving the first control unit 
identification information, storing the first control unit identification information in the proxy 
server, adding the first control unit as a first remote device, and exchanging a validation message 
between the first control unit and the proxy server, the proxy server being implemented within a 
De-Militarized Zone (DMZ) between a protected network and the unprotected public network, 
establishing a session between the first control unit and the proxy server, by use of the access 
key; and establishing a connection between the proxy server and a console, to permit remote user 
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management of the network by communication between the first control unit and the console via 
the proxy server, the console residing within an unprotected public network. 
The combination of Sit et al an d Grantges does not render Applicants ' claims obvious because 
the combination does not teach or suggest these features. 

8. Dependent claims are allowed as they depend from an allowable independent claim. 



Conclusion 

Any comments considered necessary by applicant must be submitted no later than the 

payment of the issue fee and, to avoid processing delays, should preferably accompany the issue 
fee. Such submissions should be clearly labeled "Comments on Statement of Reasons for 
Allowance." 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to FATOUMATA TRAORE whose telephone number is (571)270- 
1685. The examiner can normally be reached on Monday- Friday (every other Friday off) EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami can be reached on 571 272 4195. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained trom the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Wednesday, September 22, 2010 
/Fatoumata Traore/ 
Examiner, Art Unit 2436 



/Nasser Moazzami/ 

Supervisory Patent Examiner, Art Unit 2436 



